Description (CNA)
The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| EnergizeLab / FastAPI AI inference server | affected n/a |
CWE
CWE-306
References
- https://github.com/xn0tsa/your-secrets-are-safe-with-me
- https://takeonme.org/gcves/GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010/
- https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab
ADP enrichment
No English description supplied.
No references supplied.